CVE-2011-5009
3S CoDeSys 3.4 SP4 Patch 2 - Denial of Service via Crafted HTTP Request
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-5009. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit leverages a denial-of-service vulnerability in CoDeSys by sending a malformed HTTP POST request with an excessively large Content-Length value (4294967295) to crash the application. The attack is executed via a UDP-based tool (udpsz) targeting port 8080.
Description
The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
Exploits (2)
This exploit leverages a denial-of-service vulnerability in CoDeSys by sending a malformed HTTP POST request with an excessively large Content-Length value (4294967295) to crash the application. The attack is executed via a UDP-based tool (udpsz) targeting port 8080.
This exploit leverages a denial-of-service vulnerability in CoDeSys by sending a malformed HTTP request via UDP to port 8080, causing the application to crash.